./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor68793250 <...> Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. execve("./syz-executor68793250", ["./syz-executor68793250"], 0x7ffd76d9d640 /* 10 vars */) = 0 brk(NULL) = 0x5555566d1000 brk(0x5555566d1d00) = 0x5555566d1d00 arch_prctl(ARCH_SET_FS, 0x5555566d1380) = 0 set_tid_address(0x5555566d1650) = 294 set_robust_list(0x5555566d1660, 24) = 0 rseq(0x5555566d1ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor68793250", 4096) = 26 getrandom("\x93\x5f\xb5\x09\xff\x57\x06\xf7", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555566d1d00 brk(0x5555566f2d00) = 0x5555566f2d00 brk(0x5555566f3000) = 0x5555566f3000 mprotect(0x7fc78aff0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [ 19.880508][ T28] audit: type=1400 audit(1700068405.267:66): avc: denied { execmem } for pid=294 comm="syz-executor687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.885285][ T28] audit: type=1400 audit(1700068405.267:67): avc: denied { bpf } for pid=294 comm="syz-executor687" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 19.888698][ T28] audit: type=1400 audit(1700068405.267:68): avc: denied { prog_load } for pid=294 comm="syz-executor687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 19.891844][ T28] audit: type=1400 audit(1700068405.267:69): avc: denied { perfmon } for pid=294 comm="syz-executor687" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 19.894724][ C0] BUG: unable to handle page fault for address: ffffffffff600000 [ 19.894737][ C0] #PF: supervisor read access in kernel mode [ 19.894793][ C0] #PF: error_code(0x0000) - not-present page [ 19.894805][ C0] PGD 6c12067 P4D 6c12067 PUD 6c14067 PMD 6c16067 PTE 0 [ 19.894831][ C0] Oops: 0000 [#1] PREEMPT SMP KASAN [ 19.894844][ C0] CPU: 0 PID: 28 Comm: kauditd Not tainted 6.1.43-syzkaller-00011-gc47043d65f0a #0 [ 19.894858][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 19.894867][ C0] RIP: 0010:copy_from_kernel_nofault+0x86/0x2d0 [ 19.894904][ C0] Code: 48 89 55 d0 0f 85 de 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 1b 7d d2 ff 49 83 fd 07 76 58 4d 89 fe 49 83 c7 08 49 83 c5 f8 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 19.894915][ C0] RSP: 0018:ffffc90000006a30 EFLAGS: 00010257 [ 19.894926][ C0] RAX: 0000000000000103 RBX: 0000000000000008 RCX: ffff888100b16540 [ 19.894936][ C0] RDX: ffff888100b170e0 RSI: 0000000000000008 RDI: 0000000000000007 [ 19.894945][ C0] RBP: ffffc90000006a68 R08: ffffffff81a283f5 R09: fffff9400084ac87 [ 19.894954][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000 [ 19.894964][ C0] R13: 0000000000000000 R14: ffffc90000006aa8 R15: ffffc90000006ab0 [ 19.894973][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 19.894984][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 19.894994][ C0] CR2: ffffffffff600000 CR3: 000000012112a000 CR4: 00000000003506b0 [ 19.895006][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 19.895013][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 19.895022][ C0] Call Trace: [ 19.895026][ C0] [ 19.895032][ C0] ? __die_body+0x62/0xb0 [ 19.895047][ C0] ? __die+0x7e/0x90 [ 19.895058][ C0] ? 0xffffffffff600000 [ 19.895068][ C0] ? page_fault_oops+0x7f9/0xa90 [ 19.895086][ C0] ? 0xffffffffff600000 [ 19.895095][ C0] ? kernelmode_fixup_or_oops+0x270/0x270 [ 19.895113][ C0] ? stack_trace_save+0x113/0x1c0 [ 19.895134][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 19.895155][ C0] ? 0xffffffffff600000 [ 19.895164][ C0] ? exc_page_fault+0x512/0x6e0 [ 19.895183][ C0] ? 0xffffffffff600000 [ 19.895193][ C0] ? asm_exc_page_fault+0x27/0x30 [ 19.895207][ C0] ? 0xffffffffff600000 [ 19.895216][ C0] ? copy_from_kernel_nofault+0x75/0x2d0 [ 19.895234][ C0] ? copy_from_kernel_nofault+0x86/0x2d0 [ 19.895252][ C0] ? 0xffffffffff600000 [ 19.895261][ C0] bpf_probe_read_kernel+0x2a/0x70 [ 19.895279][ C0] bpf_prog_bd8b22826c103b08+0x3a/0x3c [ 19.895292][ C0] bpf_trace_run2+0x133/0x290 [ 19.895309][ C0] ? irqentry_exit+0x30/0x40 [ 19.895326][ C0] ? bpf_trace_run1+0x240/0x240 [ 19.895344][ C0] ? skb_release_data+0x616/0x840 [ 19.895359][ C0] ? skb_release_data+0x616/0x840 [ 19.895373][ C0] ? skb_release_data+0x616/0x840 [ 19.895388][ C0] __bpf_trace_kfree+0x6f/0x90 [ 19.895402][ C0] ? skb_release_data+0x616/0x840 [ 19.895416][ C0] kfree+0xce/0xf0 [ 19.895429][ C0] skb_release_data+0x616/0x840 [ 19.895445][ C0] __kfree_skb+0x50/0x70 [ 19.895459][ C0] tcp_rtx_queue_unlink_and_free+0x3d5/0x610 [ 19.895480][ C0] tcp_ack+0x241a/0x6a50 [ 19.895495][ C0] ? kasan_set_track+0x4b/0x70 [ 19.895516][ C0] ? tcp_rcv_established+0x1c60/0x1c60 [ 19.895533][ C0] ? debug_smp_processor_id+0x17/0x20 [ 19.895551][ C0] ? kasan_quarantine_put+0x34/0x1a0 [ 19.895572][ C0] ? __kasan_check_read+0x11/0x20 [ 19.895588][ C0] ? ktime_get+0x12f/0x160 [ 19.895607][ C0] tcp_rcv_established+0xe31/0x1c60 [ 19.895626][ C0] ? tcp_check_space+0xaf0/0xaf0 [ 19.895642][ C0] ? __kasan_check_read+0x11/0x20 [ 19.895659][ C0] ? ipv4_dst_check+0xe3/0x150 [ 19.895731][ C0] tcp_v4_do_rcv+0x430/0xa20 [ 19.895745][ C0] tcp_v4_rcv+0x20d7/0x2a30 [ 19.895764][ C0] ? tcp_filter+0x90/0x90 [ 19.895775][ C0] ? __kasan_check_write+0x14/0x20 [ 19.895792][ C0] ? __inet_lookup_established+0x831/0x860 [ 19.895812][ C0] ip_protocol_deliver_rcu+0x32f/0x720 [ 19.895828][ C0] ip_local_deliver_finish+0x24b/0x430 [ 19.895845][ C0] ip_local_deliver+0x1b3/0x3b0 [ 19.895859][ C0] ? tcp_v4_early_demux+0x587/0x910 [ 19.895872][ C0] ? ip_protocol_deliver_rcu+0x720/0x720 [ 19.895888][ C0] ? ip_rcv_finish_core+0xb40/0x14d0 [ 19.895905][ C0] ip_sublist_rcv+0x782/0x920 [ 19.895920][ C0] ? packet_sock_destruct+0x160/0x160 [ 19.895943][ C0] ? ip_list_rcv+0x470/0x470 [ 19.895957][ C0] ? memset+0x35/0x40 [ 19.895973][ C0] ? ip_rcv_core+0x759/0xba0 [ 19.895989][ C0] ip_list_rcv+0x422/0x470 [ 19.896005][ C0] ? ip_rcv_finish+0xd0/0xd0 [ 19.896019][ C0] ? __sched_clock_gtod_offset+0x100/0x100 [ 19.896034][ C0] ? ip_rcv_finish+0xd0/0xd0 [ 19.896048][ C0] __netif_receive_skb_list_core+0x6b1/0x890 [ 19.896066][ C0] ? napi_schedule_rps+0x100/0x100 [ 19.896081][ C0] ? asm_sysvec_call_function_single+0x1b/0x20 [ 19.896101][ C0] ? napi_gro_receive+0x2bc/0x920 [ 19.896123][ C0] netif_receive_skb_list_internal+0x967/0xcc0 [ 19.896144][ C0] ? sched_clock+0x9/0x10 [ 19.896164][ C0] ? virtnet_poll_tx+0x560/0x560 [ 19.896182][ C0] ? netif_receive_skb_core+0x210/0x210 [ 19.896202][ C0] ? virtqueue_get_buf_ctx+0x484/0xd30 [ 19.896217][ C0] ? detach_buf_split+0x71d/0xae0 [ 19.896232][ C0] napi_complete_done+0x344/0x770 [ 19.896252][ C0] ? __napi_schedule_irqoff+0x280/0x280 [ 19.896272][ C0] ? virtqueue_enable_cb_prepare+0x289/0x550 [ 19.896287][ C0] virtnet_poll+0xc85/0x1470 [ 19.896304][ C0] ? refill_work+0x220/0x220 [ 19.896321][ C0] ? __napi_schedule+0x2e8/0x370 [ 19.896342][ C0] __napi_poll+0xbe/0x5c0 [ 19.896358][ C0] net_rx_action+0x595/0xdd0 [ 19.896373][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 19.896388][ C0] ? net_tx_action+0x560/0x560 [ 19.896403][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 19.896416][ C0] ? sched_clock+0x9/0x10 [ 19.896436][ C0] __do_softirq+0x1d8/0x661 [ 19.896452][ C0] ? irqtime_account_irq+0xdc/0x260 [ 19.896471][ C0] __irq_exit_rcu+0x50/0xf0 [ 19.896486][ C0] irq_exit_rcu+0x9/0x10 [ 19.896500][ C0] common_interrupt+0xb4/0xd0 [ 19.896516][ C0] [ 19.896519][ C0] [ 19.896524][ C0] asm_common_interrupt+0x27/0x40 [ 19.896538][ C0] RIP: 0010:console_emit_next_record+0x8c7/0xa70 [ 19.896555][ C0] Code: 3f 28 1a 00 49 bd 00 00 00 00 00 fc ff df 48 8b 44 24 38 42 80 3c 28 00 48 8b 5c 24 40 74 08 48 89 df e8 1c b1 60 00 48 ff 03 <0f> b6 5c 24 1f 48 c7 84 24 80 00 00 00 0e 36 e0 45 48 8b 44 24 78 [ 19.896566][ C0] RSP: 0018:ffffc900001df7c0 EFLAGS: 00000293 [ 19.896578][ C0] RAX: ffffffff815ad489 RBX: 0000000000000200 RCX: ffff888100b16540 [ 19.896587][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 19.896595][ C0] RBP: ffffc900001df9d0 R08: ffffffff815ad474 R09: 0000000000000003 [ 19.896604][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffffffff86cdb5c0 [ 19.896614][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900001dfa80 [ 19.896625][ C0] ? console_emit_next_record+0x884/0xa70 [ 19.896640][ C0] ? console_emit_next_record+0x899/0xa70 [ 19.896658][ C0] ? info_print_prefix+0x300/0x300 [ 19.896678][ C0] ? prb_final_commit+0x6f/0x90 [ 19.896694][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 19.896708][ C0] ? kasan_set_track+0x60/0x70 [ 19.896722][ C0] ? kasan_save_free_info+0x2b/0x40 [ 19.896738][ C0] ? ____kasan_slab_free+0x131/0x180 [ 19.896753][ C0] console_unlock+0x2c7/0x710 [ 19.896766][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 19.896779][ C0] ? vprintk_emit+0x440/0x440 [ 19.896791][ C0] ? console_trylock+0x190/0x1f0 [ 19.896804][ C0] ? resume_console+0x50/0x50 [ 19.896819][ C0] vprintk_emit+0x141/0x440 [ 19.896832][ C0] ? printk_sprint+0x430/0x430 [ 19.896845][ C0] ? __kasan_check_write+0x14/0x20 [ 19.896861][ C0] ? _raw_spin_trylock+0xcd/0x1a0 [ 19.896873][ C0] ? __lock_text_start+0x8/0x8 [ 19.896884][ C0] ? debug_smp_processor_id+0x17/0x20 [ 19.896902][ C0] vprintk_default+0x26/0x30 [ 19.896915][ C0] vprintk+0x86/0x90 [ 19.896928][ C0] _printk+0xd1/0x111 [ 19.896940][ C0] ? kauditd_hold_skb+0xf1/0x210 [ 19.896957][ C0] ? panic+0x660/0x660 [ 19.896970][ C0] kauditd_hold_skb+0x1c0/0x210 [ 19.896986][ C0] ? auditd_conn_free+0xe0/0xe0 [ 19.897002][ C0] ? auditd_conn_free+0xe0/0xe0 [ 19.897017][ C0] ? kauditd_send_queue+0x2e0/0x2e0 [ 19.897034][ C0] kauditd_send_queue+0x28d/0x2e0 [ 19.897051][ C0] ? auditd_conn_free+0xe0/0xe0 [ 19.897066][ C0] ? kauditd_send_queue+0x2e0/0x2e0 [ 19.897083][ C0] kauditd_thread+0x4f1/0x740 [ 19.897098][ C0] ? __kasan_check_write+0x14/0x20 [ 19.897116][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 19.897128][ C0] ? audit_log+0x150/0x150 [ 19.897143][ C0] ? wake_bit_function+0x230/0x230 [ 19.897158][ C0] ? __kthread_parkme+0x12d/0x180 [ 19.897173][ C0] kthread+0x26d/0x300 [ 19.897187][ C0] ? audit_log+0x150/0x150 [ 19.897202][ C0] ? kthread_blkcg+0xd0/0xd0 [ 19.897216][ C0] ret_from_fork+0x1f/0x30 [ 19.897234][ C0] [ 19.897238][ C0] Modules linked in: [ 19.897246][ C0] CR2: ffffffffff600000 [ 19.897252][ C0] ---[ end trace 0000000000000000 ]--- [ 19.897257][ C0] RIP: 0010:copy_from_kernel_nofault+0x86/0x2d0 [ 19.897276][ C0] Code: 48 89 55 d0 0f 85 de 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 1b 7d d2 ff 49 83 fd 07 76 58 4d 89 fe 49 83 c7 08 49 83 c5 f8 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 19.897286][ C0] RSP: 0018:ffffc90000006a30 EFLAGS: 00010257 [ 19.897297][ C0] RAX: 0000000000000103 RBX: 0000000000000008 RCX: ffff888100b16540 [ 19.897305][ C0] RDX: ffff888100b170e0 RSI: 0000000000000008 RDI: 0000000000000007 [ 19.897313][ C0] RBP: ffffc90000006a68 R08: ffffffff81a283f5 R09: fffff9400084ac87 [ 19.897323][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000 [ 19.897332][ C0] R13: 0000000000000000 R14: ffffc90000006aa8 R15: ffffc90000006ab0 [ 19.897341][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 19.897353][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 19.897362][ C0] CR2: ffffffffff600000 CR3: 000000012112a000 CR4: 00000000003506b0 [ 19.897374][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 19.897381][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 19.897391][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 19.897683][ C0] Kernel Offset: disabled [ 20.878754][ C0] Rebooting in 86400 seconds..